Installing Forticlient ZTNA for VPN Access
Tech Support Article: Installing Forticlient ZTNA (Zero Trust Network Agent)
Install locations:
https://FortinetEMS01.hartwick.edu:10443/installers/Default/HC_ZTNA_Installer
- Download and Run the latest executable: FortiClientSetup_[version.number]_x64.exe
Note: This executable will update existing installations and automatically configure the ZTNA agent with Hartwick's info. It will require a restart to complete this installation.
It is also possible to manually download the ZTNA client from Fortinet directly (https://www.fortinet.com/support/product-downloads#ztna) and manually configure it. Instructions for manually creating the VPN connection under the Remote Access tab can be found in this article:
https://hartwick.freshservice.com/support/solutions/articles/21002286677
Please note that the Zero Trust Telemetry tab is only for managed services (AV, vulnerability scans, etc) and should remain connected regardless of VPN status. End users are blocked from disconnecting without a password, but if for some reason you need to reestablish the EMS connection, you should enter the server address as fortinetems01.hartwick.edu as per the following screenshot:
Please note that Fortinet provides two different VPN clients, both available on their website:
- Forticlient VPN: free stand-alone VPN client which allows for VPN connections only and does not include any advanced security features. Do not use on hartwick-owned computers.
- Forticlient ZTNA: full-featured and centrally managed client which keeps computers updated, scans for patches/vulnerabilities, and most importantly, allows for connecting to sslvpn.hartwick.edu.